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Abstract 

In this article, we define the notion of slim (normal) bases and show their existence 
for various fields. As an application, an algorithm will be given, that computes the 
spectrum of a basefield transform by merely using O(rL) additions. 
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1 Introduction 

Xtix 

Let K C C be a field, Cn '■= ^~ a primitive n-th root of unity and Gn := G(K(Ctl)/K) 
the Galois group of the extension K(CrL)/K. An element -& G K(Ctl) is called a normal 
basis generator (NBG), if the set -S^'^ := {'&'^, a € Gn} defines a basis of the K-vector space 
K(Ctl)- In this case, the set is called a normal basis of the extension K(Ctl)/1^ and its 
existence is guaranteed by the Normal Basis Theorem (cf. [3]). 

From now on, let ■& be a NBG of K(Cn)/l^- Since we are dealing with a separable 
extension, the space of functionals on K(Ctl) (i-e. HomK(K(CTL)) K)) admits a unique basis 
{4)f.,a G Gn}, with ct)^.(^P) = Tr(^*'^^P) = 5a,p, for all cr, p G Gn- We call the set 
^*Gn ._ )^^*^^ 0" G Gn} the dual basis of -S*^". Clearly, this is a normal basis. 

As a member of the family of basefield transforms, the Algebraic Discrete Fourier 
Transform (ADFT), is defined as a linear transfom ADFTn,^ : K"^ — > K^, with 
transformation matrix 

An,^:= (cl)a.(0)^^= (Tr(rO)^^, (1) 

where k, I G {0,1,..., n— 1}, and it is shown in [I , that this transform computes the 
spectrum of the Discrete Fourier Transform (DFT) relative to the normal basis d^^. 

Example. For K := C and ^ := 1 , we get ADFTn,i = DFTn- 
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Example. If we take K := R and -& := (1 + i)/2, the transformation matrix be- 
comes Q = (cos(27rkl/n] + sin(27tkl/TL))^^ and the ADFT^i^^ turns out to be equal to 
the Discrete Hartley Transform. 

Example. Now take K := Q, •& := (1 + i)/2 and n := 4. Then, after some per- 
mutation of the columns, the transformation matrix A4_^ may be written as 

/I 1 1 1 \ 
1-1 1-1 
1 1-1-1 

V 1 -1 -1 1 / 

and we see that the ADFT4^^ can be computed by using merely additions. 
This last example gives rise to the definiton of a slim basis: 

Definition 1 A normal basis d^"^ will be called a slim basis of the extension K(Cti)/K, if 

for all s & we have 

IV(rc^) e{0,±l]. (2) 

Example. It is not hard to see that if n is prime, then the set Cn"^ is a slim basis 
of the extension Q{Cn]/Q, and as we will see in the next section, the same holds if 
n is squarefree, i.e. (J.(rL)^ = 1 , where ]x denotes the Mobius function. Note that this 
is no longer true when |x(n) = 0, since in this case the element Cn is not a NBG of Q(Cn)/Q- 

One aim of this paper is to prove the following theorem: 

Theorem 1 If Gn— (Z/nZ)^, then the extension K(Cti)/K admits a slim basis. 

It is, indeed, enough to prove this in the case Q(Cn)/Q) since the condition on the Galois 
group assures that any slim basis of Q(Cn)/Q defines as well a slim basis of K(Cn)/K- 

The proof of the theorem will proceed in two steps. In the next section, we will 
reduce to the case of a prime power, and after having done this, an explicit construction 
of slim bases will be carried out. The last section concludes the discussion by providing 
an algorithm, that computes the spectrum of the ADFTn, for n = 2^, with the help of 
0(n) additions in K. 
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2 Composition and Decomposition 



Notation. We keep the notation of tiie last section. For matrices A = (ai^v) G k^xti 
and B G K™^"^, we will denote their Kronecker produkt by A (g) B := (auB) G Y™^>^^^. 
In case of n = m, we shall further write A ~ B, if there exist permutation matrices P and 
Q, such that PAQ = B. 

Now, for positive integers ni , and j G {1 , 1], let denote a NBG of the exten- 
sion K(Cnj)/K. The following proposition shows how to construct bigger transforms by 
smaller ones: 



Proposition 1 // (ni,n2) = 1 and K(Crii ) ^ ^i^ni) = ^> ^hen 

An, ,^1 'Si An,2 ,^2 ~ A-ni m ,-9i -62 • (3) 

Before we turn to the proof, we state the decomposition property of a normal basis of the 
extension K(Cn, , Cn2 For simplicity, we define Trj(-) := TrK(^^^ ,Cu2)/K(Cnj )(■)■ 

Proposition 2 Let K(Cn,) n KiUj) = ^ and d be a NBG of K{Cn, , Uj)/^- Then % 
admits a decomposition 

^ = ^1^2, (4) 

where -Sj G Y.[Cr^], if and only if 

Tr(-&)* = Tri(-&)TV2W. (5) 

In particular, i/Tr(-&) = 1 = (ni,n2) and^ can he written as a produkt in the above sense, 
then 

An, n2 ,-9 ~ An, ,Tr, (d) <^ An2 ,Tr2 m ■ (6) 

Proof. We start with the first proposition. Since K(Cn, ) H l^(Cn2) — Galois theory 
gives 

G(K(Cn,,Cn2)/K) ~G(K(Cn,)/K) X G(K(Cn2)/K), 

and therefore ^1^2 is a NBG of K(Cni , Cnal/K. We further have (^1^2)* = •&i^2' by 
uniqueness of the dual basis. Next, the condition (n-i, 1x2) = 1 leads to K(Cn, )Cn2) = 
K(Cnin2)) a^nd to integers si,S2 with siui + S2n2 = 1, so that in summary: 



TV((^1^2)*Cn,n2) = T^imQ, )Tri mQ^) = TVk(c^, )/KmC% ]TrK(c^^vK(^2C 
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s, 1 

U2 ' 



For the decomposition, we first note that the element Trj('&) is easily seen to 
be a NBG of the extension K(Cn )- On the other hand, if -& = ■&1-&2) then 
Tri(^) = -aiTril^a), and since K{Cn,) n K^Cnj) = K, we have Tri(^2) S K, 
so in particular Ti'(^) = Tr2(Tri(d)) = Tri (^2)Tr2(^i ). We finaly obtain 
Tri(^)Tr2(^) = ■&i^2Tri (^2)Tr2(^i ) = '&TV(^), which proves the statement of the 
second proposition. □ 

Remark. There are normal bases, that do not decompose in the above sense: 
the element C3C5 + 1 generates a normal basis of the extension Q(Ci5)/Q, but 
9(C3C5 + 1) /(4-C3)(2-C5). 

By proposition ^ we may restrict the search for slim bases to the case where n is 
a prime power. In addition, by what has been said before, the "tame" case of theorem ^ 
easily follows: 

Theorem 2 Let ix be a positive integer with [i{n)'^ = 1. Then the element d := |j,(n)Cn 

generates a slim basis of the extension Q(Cn)/Q- 



3 Normal bases and Gauss sums 

Notation. In this section, let K be an abelian number field with Galois group 
G := G(K/Q). For a character x of K, we shall denote its conductor by and its 
field of values by Q(x) := Q(x(o'),o' e G). Further, we define for p G G(Q(x]/Q]: 
X'^(cr) := (x(o'))'^) for all a G G. We will write x foi' the inverse of the charakter X) so 
XX = Xo, with Xo(o') = 1 for all a G G. For an introduction to Dirichlet characters, we 
refer to [H], [S]. 

To construct slim bases of the extension Q(Ctl)/Q for general n, we will introduce 
a representation of algebraic numbers, which goes back to H.-W. Leopoldt [3]. 

For this, let us recall the definition of a Gauss sum. Let x be a Dirichlet charac- 
ter, defined modm, and a G Z be an integer. The corresponding Gauss sum is then 
defined as 

T(x!0:=Xx(s)C, (7) 

snm 

where "s fl ra" is short for s G (Z/mZ)^. If m = f ^ and a = 1, we will simply write 

'r(x):='r(xlCfx)- (8) 
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Since t(x)t(x) = x(~l)fx' ^^^^ always 7^ 0. For the general case write — ^mo, 

with (ao,mo) = 1, and it holds that t(xIC^^v) — if ^x/^O) and in case of fxIfTLo: 

'^(XIC) = —, 7^(-^)x(-^)x(ao)T(x), (9) 

(p(moJ fx fx 

where cp denotes the Euler phi-function. For an introduction to Gauss sums and their 
basic properties, we refer to 

The following theorem will turn out to be crucial for the construction of slim bases: 



Theorem 3 (Leopoldt) Let K he an ahelian number field with Galois group G. For each 
•& G K there exists a unique set 0/ x-coordinates UkIxI'^)) such that 

^ = 4jLyKWWx), (10) 

X 

where 

yK(xl^) e Q(x) (ii) 

and 

VK{xm=VK[xm', (12) 

for a// p e G( 



On the other hand, any set of coordinates satisfying relations and gives 

rise to a unique element of K. 



Note that in the original paper there seem to be some minor misprints. In particular the 
following propostion slightly differs from [3]. 



Proposition 3 Let ^ G K. Then 

yK(xl^) = f Xx(o-)^"^, (13) 

and in particular 

yK(xl^")=x(o-)yK(xl^). (14) 
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Proof. A proof of this proposition (and also of theorem can be found in [2]. □ 
Now, the next theorem gives the desired connection to normal bases: 

Theorem 4 (Leopoldt) The element •& € K is a NBG of the extension K/Q, if and only 
^/UkIxI'^) / for all characters x o/K. 



4 Explicit construction of slim bases 

In order to construct slim bases, we start with a calculation of the x-coordinates of a dual 
basis: 

Proposition 4 Let K be an abelian number field and d = j^^^-^yK{x\^)'^ix) be a NBG 
of the extension K/Q. Then the x-coordinates of the dual -&* are determined by 

ijK(xr) = /^~l?,, - (15) 

Proof. First, note that the right hand side of (|15jl satisfies the conditions and 
since conjugated characters have the same conductor. Now, for a, |3 G K and a, p G G, 
consider the produkt 

a'^pp = ^^x[^]Mp)yY.[x\^]vK[M^)<xUA>). 

Taking the trace on both sides and rearranging the terms gives: 

Trla'^pP) = -1| ^x(o-H(p)yK(xla)yK(i|^l(3MxMi|;)|^ }lx(7t)iP 

Next, we notice that the sum ^^x(7t)ip(7T) equals 0, if i); 7^ X- Iii case of i|> = x it is equal 
to |G|, and since t(x)t(x) = x(~1)fxi this leads to 

Trta'^pP) = |^XyK(xlcx)yK(xl(3)x(o-)x(p)x(-1)fx- (16) 

X 

Finally, by taking a := •& and |3 :=-&*, the proposition follows. □ 
As an immediate consequence we have: 
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Proposition 5 The transformation matrix of the rational ADFT satisfies 

Proof. This follows from the definition of the matrix K^^^ in combination with 1)151) and 

(Cni). ' □ 

Next, we will compute the x-coordinates of the roots of unity: 

Proposition 6 For integers \.^\^7L, write = Cr^, with (no, Qq) = 1. Then 



' else 



Proof. This follows from (|13|) in combination with Q. □ 



By what has been said before, we may now assume that n = p^, with p being a 

1 V- tj(xK!^M 



prime. We further write c = Cao.no = Ci<_t := -^^^ '^^f^\^ , and are now led to the 
following cases: 



no = 1 : This leads to c = , . We set 

— y{xo|S) 

y(xol^] = 1 (19) 

and obtain c = 1 . 



no = 2: Due to the last case: c 



-1 

y(xoia) 



TLO = P / 2: It follows that c = "j;;^ + fx=p yf^) • characters Xi with 

f X = p , we set 

y(xl^) = -i (20) 

and now c = ^y.xi(^o)^ so c = — 1 , if ao = 1 modp, else c = 0. 
no = 2^, s > 1 : In this case we have c = ^^^j fx =2= ^yf^T' "''^ 

y(xl^) = ^, (21) 
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for characters with conductor 2^ ^ 4, then, since Y^^ -7sX(io) = YvXi^o) — 
Hxf <2" Xlo^o); we get c = 1, if ao = 1 mod 2^, c = — 1, if ao = 1 + 2^^^ mod 2^, and else 
c ='0^. 

riQ = p^, s > 1 ,p 7^ 2: For characters x with f-^ = p^, we set 

vim = -]^(-)x[^+iv'-'), (22) 

where denotes the Legendre symbol. Since = p^, x(l +t-P^^^) is a primitve p-th 
root of unity and therefore ■y(xl'&)'y (xl'^) = ^- This leads to 

Now, ^^f^^ps x(<io)x(1 +T-P^^M 0) if and only if ao = 1 +jp*^^ modp^, (j,p) = 1, and 
in this case, we obtain c = (^^^ . Else c = 0. 

As an easy task, it remains to verify, that the defined coordinates 'y(xl'&) fulfill the 
requirements of and (|12|) . This completes the proof of theorem ^ D 



5 A very fast Fourier transform 

As an application we will give an algorithm, that computes the spectrum of the (rational) 
ADFTrt, for n = 2^ For this, let 

^ ^^+]^r{x)) (23) 



x/xo 

be the (slim) normal basis generator of the extension Q(Cn)/Q7 that was defined in the 
last section. Further, let 

Nn,^^:=(Tr(^rc!,))^ , (24) 

with I = 0,...,n/2- 1 and cr e G(Q(Cn)/Q)- Since Cn = LaTr(^n°'Cn)^n> this ma- 
trix describes the change between the polynomial basis and the normal basis {-S^^la- 
Writing An := A^,^^, := N^^On and En for the identity matrix of rank n, we have: 
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Proposition 7 A permutation of the columns of An leads to the matrix 

An=(A2 0E,/2)( '^"/^ (25) 

Proof. The permutation of the columns works as follows: first we take the even ones 

0. 2. . . . ,n — 2, and after that the inverse of the odd columns (modn) 1 , 3^^ , . . . , (n — 1 
For n ^ 4 and any NBG 9 G QtCn); we are led to a matrix 

where the new NBG 9' € QlCn/i) is derived from 9 by deleting the highest x-coordinates, 

1. e y (xl0') y (xl0)i for fx ^ ^/^- Finaly, setting 9 := dn, finishes the proof. □ 

A similar proposition can be stated for the matrix Nn- 

Proposition 8 Let 4. A permutation of the rows o/N^ leads to the marix 

Nn=(^"/" ^^^^ ) (A2 0E,/4). (26) 

Proof. The rows are ordered by taking the even ones first, and then the odd ones. Since, 
for k ^ 2 and odd s, it holds that [2^^^ + s)^^ = 2^^^ + s^^ mod 2^, we obtain, for any 
NBG 9 e QiU, 

^^•^ = ( \7 ^RnT ) = ( R.e ) ® 

where Rn.e denotes the matrix 

Rn,e := (Tr(9*C},^"'))^^, 

with I, s = 1 , . . . , n/2 — 1 ; I, s odd. Again, the NBG 9' G Q{Cn/z) is derived from 9, in the 
way that was already discussed in the proof of proposition [7J For 9 := d-n, this leads to 
^n,Sn = cf. the last section. □ 

Putting the pieces together, we obtain: 
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Theorem 5 For n = 1} , the above defined algorithm computes the spectrum of the 
ADFTiT^-a^ by merely using 0[n) additions in Q. 



Proof. First we note that the number of operations needed to perform the base change is 
hnear in n: TN(n) = TN(n/2) + n/2 ^ n — 2. Therefore, the total number of operations 
needed by the algorithm is 

TA(n) = TA(n/2) + (n) + n G 0(n) , 

and since we are working with a slim basis, the theorem follows. □ 

Figure n gives an example of the algorithm with u = 8. 
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